RedTeam-Physical-Tools

Red Team – Physical Security – Covert Entry – EDC A curated list of commercially available tools commonly referenced in authorized physical security assessments, red teaming, and covert entry training. Legal & Ethics: Use only with written authorization and in accordance with local laws. Many too...

CVE-2025-65270

CVE-2025-65270 ⚠️ 免责声明 本仓库仅用于教育和防御性安全研究 🔥 概述 ClinCapture EDC 3.0 和 2.2.3 中存在反射型跨站脚本（XSS）漏洞，允许未经身份验证的远程攻击者在受害者浏览器的上下文中执行 JavaScript 代码。 🧪 概念验证 要演示该漏洞，您需要进入密码找回选项卡，并在 name 或 email 参数中指定有效负载，或者发送一个请求 🔓 通过 name 参数 root@kitploit:...

CVE-2025-65270

Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...

CVE-2025-65270

Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...

CVE-2025-65270

Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...

PT-2025-52667

Name of the Vulnerable Software and Affected Versions ClinCapture EDC versions 2.2.3 and 3.0 Description A reflected cross-site scripting XSS issue exists that allows a remote attacker to execute JavaScript code within a user's browser. The attacker does not need to be authenticated to exploit th...

EUVD-2024-1371

Malicious code in bioql PyPI...

EUVD-2024-45457

Malicious code in bioql PyPI...

MAL-2025-9969 Malicious code in @zalastax/nolb-_edc (npm)

The package @zalastax/nolb-edc was found to contain malicious code...

Malicious code in @zalastax/nolb-_edc (npm)

The package @zalastax/nolb-edc was found to contain malicious code...

Malicious code in edc-ng2-select (npm)

The package edc-ng2-select was found to contain malicious code...

MAL-2025-19215 Malicious code in edc-ng2-select (npm)

The package edc-ng2-select was found to contain malicious code...

CVE-2024-4536

In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, in the EDC Connector component https://github.com/eclipse-edc/Connector , an attacker might obtain OAuth2 client secrets from the vault. In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, we have identified a security...

CVE-2024-51625

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in edckwt Quran Shortcode quran-shortcode allows Blind SQL Injection.This issue affects Quran Shortcode: from n/a through = 1.5...

CVE-2024-51625

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in edckwt Quran Shortcode quran-shortcode allows Blind SQL Injection.This issue affects Quran Shortcode: from n/a through = 1.5...

CVE-2024-51625

CVE-2024-51625 is a WordPress plugin issue in Quran Shortcode (EDC Team) with an SQL injection vulnerability. Connected sources confirm: affected software is Quran Shortcode versions up to 1.5 (and earlier); root cause is improper neutralization of special elements in SQL commands, leading to bli...

CVE-2024-51625 WordPress Quran Shortcode plugin <= 1.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in edckwt Quran Shortcode quran-shortcode allows Blind SQL Injection.This issue affects Quran Shortcode: from n/a through = 1.5...

PT-2024-34768 · Unknown · Edc Team Quran Shortcode

Name of the Vulnerable Software and Affected Versions: EDC Team Quran Shortcode versions 1.5 and earlier Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection,...

AZL-48249 CVE-2024-43909 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference for smu7 optimize the code to avoid pass a null pointer hwmgr-backend to function smu7updateedcleakagetable...

UBUNTU-CVE-2024-43909

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference for smu7 optimize the code to avoid pass a null pointer hwmgr-backend to function smu7updateedcleakagetable...